{"id":"https://openalex.org/W4411206624","doi":"https://doi.org/10.1109/isdfs65363.2025.11011958","title":"A Game Between the Defender and the Attacker for Trigger-Based Black-box Model Watermarking","display_name":"A Game Between the Defender and the Attacker for Trigger-Based Black-box Model Watermarking","publication_year":2025,"publication_date":"2025-04-24","ids":{"openalex":"https://openalex.org/W4411206624","doi":"https://doi.org/10.1109/isdfs65363.2025.11011958"},"language":"en","primary_location":{"id":"doi:10.1109/isdfs65363.2025.11011958","is_oa":false,"landing_page_url":"https://doi.org/10.1109/isdfs65363.2025.11011958","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2025 13th International Symposium on Digital Forensics and Security (ISDFS)","raw_type":"proceedings-article"},"type":"conference-paper","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5114172010","display_name":"Chaoyue Huang","orcid":null},"institutions":[{"id":"https://openalex.org/I113940042","display_name":"Shanghai University","ror":"https://ror.org/006teas31","country_code":"CN","type":"education","lineage":["https://openalex.org/I113940042"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Chaoyue Huang","raw_affiliation_strings":["School of Communication and Information Engineering, Shanghai University,Shanghai,China,200444"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"School of Communication and Information Engineering, Shanghai University,Shanghai,China,200444","institution_ids":["https://openalex.org/I113940042"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5049733139","display_name":"Hanzhou Wu","orcid":"https://orcid.org/0000-0002-1599-7232"},"institutions":[{"id":"https://openalex.org/I113940042","display_name":"Shanghai University","ror":"https://ror.org/006teas31","country_code":"CN","type":"education","lineage":["https://openalex.org/I113940042"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Hanzhou Wu","raw_affiliation_strings":["School of Communication and Information Engineering, Shanghai University,Shanghai,China,200444"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"School of Communication and Information Engineering, Shanghai University,Shanghai,China,200444","institution_ids":["https://openalex.org/I113940042"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":1,"corresponding_author_ids":[],"corresponding_institution_ids":["https://openalex.org/I113940042"],"apc_list":null,"apc_paid":null,"fwci":2.8273,"has_fulltext":false,"cited_by_count":2,"citation_normalized_percentile":{"value":0.90458707,"is_in_top_1_percent":false,"is_in_top_10_percent":true},"cited_by_percentile_year":{"min":97,"max":98},"biblio":{"volume":null,"issue":null,"first_page":"1","last_page":"6"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10388","display_name":"Advanced Steganography and Watermarking Techniques","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1707","display_name":"Computer Vision and Pattern Recognition"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10388","display_name":"Advanced Steganography and Watermarking Techniques","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1707","display_name":"Computer Vision and Pattern Recognition"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12357","display_name":"Digital Media Forensic Detection","score":0.9925000071525574,"subfield":{"id":"https://openalex.org/subfields/1707","display_name":"Computer Vision and Pattern Recognition"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11598","display_name":"Internet Traffic Analysis and Secure E-voting","score":0.987500011920929,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/digital-watermarking","display_name":"Digital watermarking","score":0.8697491884231567},{"id":"https://openalex.org/keywords/black-box","display_name":"Black box","score":0.6898608207702637},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.669960618019104},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.4588104486465454},{"id":"https://openalex.org/keywords/computer-graphics","display_name":"Computer graphics (images)","score":0.43825146555900574},{"id":"https://openalex.org/keywords/multimedia","display_name":"Multimedia","score":0.3247024118900299},{"id":"https://openalex.org/keywords/artificial-intelligence","display_name":"Artificial intelligence","score":0.3007183074951172},{"id":"https://openalex.org/keywords/image","display_name":"Image (mathematics)","score":0.07955732941627502}],"concepts":[{"id":"https://openalex.org/C150817343","wikidata":"https://www.wikidata.org/wiki/Q875932","display_name":"Digital watermarking","level":3,"score":0.8697491884231567},{"id":"https://openalex.org/C94966114","wikidata":"https://www.wikidata.org/wiki/Q29256","display_name":"Black box","level":2,"score":0.6898608207702637},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.669960618019104},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.4588104486465454},{"id":"https://openalex.org/C121684516","wikidata":"https://www.wikidata.org/wiki/Q7600677","display_name":"Computer graphics (images)","level":1,"score":0.43825146555900574},{"id":"https://openalex.org/C49774154","wikidata":"https://www.wikidata.org/wiki/Q131765","display_name":"Multimedia","level":1,"score":0.3247024118900299},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.3007183074951172},{"id":"https://openalex.org/C115961682","wikidata":"https://www.wikidata.org/wiki/Q860623","display_name":"Image (mathematics)","level":2,"score":0.07955732941627502}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1109/isdfs65363.2025.11011958","is_oa":false,"landing_page_url":"https://doi.org/10.1109/isdfs65363.2025.11011958","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2025 13th International Symposium on Digital Forensics and Security (ISDFS)","raw_type":"proceedings-article"}],"best_oa_location":null,"sustainable_development_goals":[],"awards":[{"id":"https://openalex.org/G6926654585","display_name":null,"funder_award_id":"24ZR1424000","funder_id":"https://openalex.org/F4320321885","funder_display_name":"Science and Technology Commission of Shanghai Municipality"},{"id":"https://openalex.org/G7263650625","display_name":null,"funder_award_id":"U23B2023","funder_id":"https://openalex.org/F4320321001","funder_display_name":"National Natural Science Foundation of China"}],"funders":[{"id":"https://openalex.org/F4320321001","display_name":"National Natural Science Foundation of China","ror":"https://ror.org/01h0zpd94"},{"id":"https://openalex.org/F4320321885","display_name":"Science and Technology Commission of Shanghai Municipality","ror":"https://ror.org/03kt66j61"}],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":0,"referenced_works":[],"related_works":["https://openalex.org/W2361629745","https://openalex.org/W2107922825","https://openalex.org/W3094285444","https://openalex.org/W1568204688","https://openalex.org/W2381262728","https://openalex.org/W2111592878","https://openalex.org/W1846726187","https://openalex.org/W1593964766","https://openalex.org/W2387614453","https://openalex.org/W2365808414"],"abstract_inverted_index":{"Watermarking":[0],"deep":[1],"neural":[2],"network":[3],"(DNN)":[4],"models":[5],"has":[6,95],"attracted":[7],"a":[8,40,44,87,91,104],"great":[9],"deal":[10],"of":[11,19,28,73,78,121,140],"attention":[12],"and":[13,110,130,143],"interest":[14],"in":[15,99,151],"recent":[16],"years":[17],"because":[18],"the":[20,25,59,63,67,71,76,82,97,107,111,122,127,132,137,152],"increasing":[21],"demand":[22],"to":[23,85,102,147],"protect":[24],"intellectual":[26,55],"property":[27,56],"DNN":[29,46],"models.":[30],"Many":[31],"practical":[32],"algorithms":[33],"have":[34],"been":[35],"proposed":[36],"by":[37],"covertly":[38],"embedding":[39],"secret":[41],"watermark":[42],"into":[43],"given":[45],"model":[47,64,108,112,117,141],"through":[48],"either":[49,86],"parametric/structural":[50],"modulation":[51],"or":[52,90],"backdooring":[53],"against":[54],"infringement":[57],"from":[58],"attacker":[60,109],"while":[61],"preserving":[62],"performance":[65,72],"on":[66],"original":[68],"task.":[69],"Despite":[70],"these":[74],"approaches,":[75],"lack":[77],"basic":[79],"research":[80],"restricts":[81],"algorithmic":[83],"design":[84],"trial-based":[88],"method":[89],"data-driven":[92],"technique.":[93],"This":[94],"motivated":[96],"authors":[98],"this":[100],"paper":[101],"introduce":[103],"game":[105],"between":[106],"defender":[113],"for":[114],"trigger-based":[115],"black-box":[116],"watermarking.":[118],"For":[119],"each":[120],"two":[123],"players,":[124],"we":[125],"construct":[126],"payoff":[128],"function":[129],"determine":[131],"optimal":[133],"response,":[134],"which":[135],"enriches":[136],"theoretical":[138],"foundation":[139],"watermarking":[142],"may":[144],"inspire":[145],"us":[146],"develop":[148],"novel":[149],"schemes":[150],"future.":[153]},"counts_by_year":[{"year":2026,"cited_by_count":2}],"updated_date":"2026-07-29T14:22:42.915294","created_date":"2025-10-10T00:00:00"}